What is GHSA-jj58-488v-4rgf?

GHSA-jj58-488v-4rgf is a security advisory published by GitHub Security Advisories with Critical severity. obx Prototype Pollution

Which CVE IDs does GHSA-jj58-488v-4rgf cover?

GHSA-jj58-488v-4rgf covers the following CVE IDs: CVE-2024-36573. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jj58-488v-4rgf?

GHSA-jj58-488v-4rgf has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-jj58-488v-4rgf?

GHSA-jj58-488v-4rgf affects 1 product, including: npm/@almela/obx:\u003c 0.0.4.

GHSA-jj58-488v-4rgfCriticalCVSS 9.8

obx Prototype Pollution

Vendor

GitHub Security Advisories

Published

June 17, 2024

Last Modified

August 2, 2024

🔗 CVE IDs covered (1)

CVE-2024-36573 →

📋 Description

almela obx before v.0.0.4 has a Prototype Pollution issue which allows arbitrary code execution via the obx/build/index.js:656), reduce (@almela/obx/build/index.js:470), Object.set (obx/build/index.js:269) component.

🎯 Affected products1

npm/@almela/obx:< 0.0.4

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-36573
https://gist.github.com/mestrtee/fd8181bbc180d775f8367a2b9e0ffcd1
https://github.com/llGaetanll/obx/commit/984ad92dc06774da4e6bdae0f5f5e59ae80ece8f
https://github.com/advisories/GHSA-jj58-488v-4rgf